—
GO-2026-5647
free5GC's NEF crashes via logger.Fatal on PFD notification delivery failure (attacker-controlled notifyUri) in github.com/free5gc/nef
Quick fix
GO-2026-5647 — github.com/free5gc/nef: upgrade to the fixed version with the command below.
go get github.com/free5gc/nef@v1.2.3Details
free5GC's NEF crashes via logger.Fatal on PFD notification delivery failure (attacker-controlled notifyUri) in github.com/free5gc/nef
Are you affected?
Enter the version of the package you're using.
Affected packages
References
- https://github.com/free5gc/free5gc/security/advisories/GHSA-rxrq-fv76-26pr[ADVISORY]
- https://nvd.nist.gov/vuln/detail/CVE-2026-44319[ADVISORY]
- https://github.com/free5gc/nef/commit/f110517b1189801950b50668a593398687049074[FIX]
- https://github.com/free5gc/nef/pull/25[FIX]
- https://github.com/free5gc/free5gc/issues/924[WEB]